Visitor analytics & privacy

Site analytics is on by default. Unless you turn it off or your browser sends Global Privacy Control, we store random visitor and session identifiers and events describing pages viewed, product options and images selected, cart changes, searches and result counts, collection filters, scroll depth, active time, checkout steps and error categories. Search text and checkout field contents are not collected. We record broad device size and recognized traffic sources, without retaining full referrer URLs, ad-click identifiers or full URL query strings in site analytics. We retain limited campaign labels and identifiers (source, medium, campaign, creative, ad, ad set, platform and placement when supplied), the public landing page, and first and last external visit times. When site analytics is on, we link these details and anonymous browser/session identifiers to an order reference to measure paid sales.

We do not make session recordings or capture keystrokes, names, emails, shipping addresses, payment details or private order links in visitor analytics. Order pages use a generic page label. The internal order reference lets authorized administrators connect a visit to a paid order; names and contact information are not copied into activity reports. Operational order information is processed separately to take payment and fulfill your order.

Analytics events are kept for up to 90 days, with expired records removed as new events arrive. A random visitor identifier is stored in your browser for up to 90 days to count repeat visits from the same browser once. It is not based on your IP address and does not identify you across devices or browsers. A session expires after 30 minutes without activity. Reports are available only with administrator authorization. A temporary hashed network identifier helps limit abuse and expires after two hours; raw IP addresses are not stored in the analytics database.

You can turn site analytics off or on using “Site analytics choices” on any shop page. Turning analytics off stops new activity collection and removes the visitor/session identifiers and saved campaign history from this browser. If you turn it off before continuing to payment, attribution attached to that checkout is cleared. Global Privacy Control is treated as a refusal of site analytics. Browser privacy controls and storage restrictions may prevent collection.

Advertising measurement has a separate choice. If allowed, Google may receive ad-click information, a verified purchase value and order reference to measure advertising performance. We do not send your name, email or delivery address in these conversion events. Shopping works whether either measurement option is on or off.

Facebook and Instagram measurement has its own opt-in. If you allow it, our server sends Meta public page views, ad-click identifiers, browser and IP information, and the verified merchandise value and reference for a paid order. We exclude checkout contents, names, emails, shipping addresses, payment details and private order links. We keep the ad-click identifier in this browser tab for attribution and remove it when you turn Meta measurement off. We retain the measurement choice at checkout and a delivery-status label for up to 90 days so we can distinguish permission choices from delivery failures. No purchase is sent to Meta without opt-in. An event acknowledgement is retained for up to 90 days to prevent duplicate purchase reporting. Meta measurement stays off under Global Privacy Control. You can change your choice using “Facebook and Instagram privacy choices.”